A weakness in the IM‑Magic Partition Resizer up to version 7.9.0 affects the kernel driver MDA_NTDRV.sys. The driver exposes an unknown function with inadequate access controls, allowing a local attacker to manipulate kernel‑level operations. This gives the attacker the ability to execute code or perform actions with SYSTEM privileges. The flaw is classified as CWE‑266 and CWE‑284.

All installations of IM‑Magic Partition Resizer up to version 7.9.0. The vulnerability pertains to the kernel driver component MDA_NTDRV.sys and is present in all builds of the product up to and including that version.

The vulnerability has a CVSS score of 8.5 and is not listed in the CISA KEV catalog. EPSS data is not available, but the public release of a working exploit indicates that the attack is feasible on systems where the product is installed. The exploit requires local access; it leverages improper privilege management to gain kernel‑level execution. Attackers would need to be able to run the driver or manipulate its usage to achieve the escalation.